SPIN Unprocessed October 31, 2026 ai_technology cybersecurity
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
View original on thehackernews.comOverview
A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed. The researchers reported the flaw through OpenAI's bug bounty program on October 18, and OpenAI fixed it eight days later and rated it P1, its most serious category.
SpinGraph analysis pending — check back after processing.
Ask AI about this story
Opens with the SpinGraph .md URL and structured context — one click, prompt included.
More from The Hacker News
View all →- Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
- Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
- Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison
- Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving
- Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis
- WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
Markdown (.md) · JSON-LD schema (.json) · Machine-readable for AI & GEO